General

  • Target

    0c9f92e381709c176eb2ebd0263ac3fc_JaffaCakes118

  • Size

    18KB

  • Sample

    240625-ffvq3a1eme

  • MD5

    0c9f92e381709c176eb2ebd0263ac3fc

  • SHA1

    36991426a89416bfc5b1d926a956104a1d4aded3

  • SHA256

    a4ee22697e85e57d8d8c73a278d83801022592f5ae15986a3df8ab7ad4d75ecd

  • SHA512

    d32c63c8e4161713716a5fd6820cb182e10d4a900b92cd237641630352a89a606bcec7a4a8ae7ab5feced3ca214c9929a6d5805f77e916a4cf78baa6ac22d9c5

  • SSDEEP

    384:5r3keEG5NS3aUEcIIx/j91BH/98q05xT4kstbmgzQLZk:5r3keEGLS3LEgjxV8xxT4zBmg

Malware Config

Targets

    • Target

      0c9f92e381709c176eb2ebd0263ac3fc_JaffaCakes118

    • Size

      18KB

    • MD5

      0c9f92e381709c176eb2ebd0263ac3fc

    • SHA1

      36991426a89416bfc5b1d926a956104a1d4aded3

    • SHA256

      a4ee22697e85e57d8d8c73a278d83801022592f5ae15986a3df8ab7ad4d75ecd

    • SHA512

      d32c63c8e4161713716a5fd6820cb182e10d4a900b92cd237641630352a89a606bcec7a4a8ae7ab5feced3ca214c9929a6d5805f77e916a4cf78baa6ac22d9c5

    • SSDEEP

      384:5r3keEG5NS3aUEcIIx/j91BH/98q05xT4kstbmgzQLZk:5r3keEGLS3LEgjxV8xxT4zBmg

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks